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CONTROL DEVICE FOR A SYSTEM, AND METHOD FOR 
OPERATING THE CONTROL DEVICE 

FIELD OF THE INVENTION 

The present invention relates to a control device for a system, and to a method 
for operating the control device. 

5 BACKGROUND INFORMATION 

International Patent Publication No. WO 97/13064 describes a control device for 
a system and a method for operating a control device in which a plurality of 
activatable modules are provided. These modules are activated by a scheduler 
which takes into account priorities that are assigned to the modules. In this 
JO context, however, the priorities assigned to the modules are fixed and cannot be 
modified. 

~1 SUMMARY OF THE INVENTION 

The control device according to the present invention and the method according 
Jl 5 to the present invention for operating the control device have the advantage 
r that the sequence control system for the modules is improved as a result of 

modifiable priorities. In this fashion, in particular, a plurality of modifiable 

conditions can be taken into account for the sequence control system, i.e. for 

activating and executing modules. 

20 

By taking into account the time period during which the particular module is 
activated or deactivated, it is possible to ensure that modules which have not 
been executed for some time or have been executed quite recently are taken 
into consideration accordingly. By taking into account system states, the priority 

25 of modules can be made dependent on external states. In an advantageous 
manner, both methods are linked to one another so as to ensure the greatest 
possible flexibility in the activation of modules. Increasing the priority upon 
activation ensures that a certain minimum run time is available to modules. By 
taking into account the absolute time, it is possible to implement positive run 

30 conditions which depend on an absolute time signal. Advantageously, the 
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scheduler follows a selection process for the modules in which higher-priority 
modules are given preferred consideration. 



BRIEF DESCRIPTION OF THE DRAWINGS 
5 Figure 1 shows a control device and a system according to the present 
invention. 

Figure 2 shows a first graph for allocating priorities to modules. 
10 Figure 3 shows a second graph for allocating the priorities to the modules. 
Figure 4 shows a third graph for allocating the priorities to the modules. 
Figure 5 shows a first step for a selection process using a scheduler. 

15 

Figure 6 shows a second step for the selection process using the scheduler. 
Figure 7 shows a third step for the selection process using the scheduler. 
20 Figure 8 shows a fourth step for the selection process using the scheduler. 

- DETAILED DESCRIPTION 

Figure 1 shows a control device 1 which is connected via connecting lines 4 to 
a system 2 to be controlled. Control device 1 has a microcomputer 3 which is 

25 provided for the execution of modules 10, 11, 12. Module 10 represents a 

plurality of modules, which are functional modules. Such functional modules 10 
are provided in order to control or diagnose system 2. Module 1 1 is a scheduler, 
and module 1 2 is a module which acts as priority manager. 

30 System 2 can be any desired technical system which is controlled by a control 
device 1 . For example, system 2 can be a motor vehicle, an internal combustion 
engine, or a transmission. Such system 2 is equipped with a plurality of sensors 
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and a plurality of actuators. Actuation data generated by control device 1 can be 
transmitted via connecting lines 4 to the actuators of system 2 (arrow pointing 
toward system 2). In addition, measured values of sensors of system 2 can be 
transferred via connecting lines 4 to control device 1 (arrow pointing toward 
5 control device 1). Control device 1 thus receives data concerning states of 

system 2 which are processed by control device 1 and converted, as a function 
of desired states (for example, accelerator pedal position in a motor vehicle), 
into control data for system 2. 

10 Control device 1 is schematically illustrated with multiple modules 10, 11, 12 
and microcomputer 3. Other hardware components usually used for control 
device 1 are not illustrated herein. Modules 10, 11, 12 are usually configured as 
program modules, but hardware modules which perform the corresponding 
~ functions can also be used. A function module 10 configured as a program 

.-15 module is a sequence of program instructions which are activated or deactivated 
as a unit by scheduler 1 1 . In this context, functions which present themselves 
to the user as a unit or are used to control a unified function can be divided into 
." multiple modules managed separately by scheduler 1 1 . Function modules 10 are 

:1 required for the processing of direct control tasks or diagnostic tasks. These 

□>0 modules analyze control data of system 2, and as a function of predefined 
,|j setpoints generate corresponding control data for system 2. An input signal of a 

m function module of this kind can consist, for example in a motor vehicle, of the 

engine speed and the setpoint information in the gas pedal position, from which 
a corresponding control datum for the engine is then generated. Function 
25 modules 10 which monitor proper operation of system 2 can also be provided. 

In a motor vehicle, for example, the functionality of the catalytic converter must 
be checked during vehicle operation based on regulatory stipulations. This is 
done by activating, from time to time, a corresponding function module 10 
which checks the operation of the catalyst by analyzing signals from the lambda 
30 probe. 

Function modules 10 can be in the active or inactive state. In the inactive state, 
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the tasks connected with the module, such as diagnosis or control of elements 
of the system, are not executed. This means in particular that inactive modules 
read in data from the system only to test their readiness to operate, and that no 
data are output to system 2. In the inactive state, however, the modules can 
5 still exchange data with, for example, microcomputer 3. In particular, it should 
still be possible to exchange data between function modules 10 and scheduler 
1 1 data concerning the activation of a module (e.g. activation capability or 
request). Since not all function modules 10 are required in every operating state 
of system 2, at least a portion of those modules can be inactivated. Activation 
10 of the individual function modules is accomplished by way of a sequence control 
system which decides which function modules 10 to execute. Scheduler 1 1 and 
priority manager 12 are part of this sequence control system. The sequence 
control system can make the activation of individual function modules 
n dependent upon specific external conditions. For example, function modules 10 

3 5 which have to do, for example, with the ignition or fuel injection systems of a 
J gasoline engine are activated as a function of the crankshaft position of the 

jy engine. Similarly, function modules 10 which have to do with the diagnosis of 

system 2 are activated as a function of operating states of system 2. What is 
f; essential here is that multiple function modules 10 can be processed 

=g0 concurrently, meaning that the processing of one module is not yet complete 
^ while a different module is also being processed simultaneously. A 

S microcomputer 3 can only execute a single instruction which is assigned to a 

specific module. Simultaneous processing thus means, in this context, that 
modules which are being processed simultaneously are provided for the 
25 allocation of computing time, so that the functions connected with the 
corresponding modules are performed. 

Scheduler 1 1 and priority manager 12 are part of the sequence control system 
which decides which modules are activated and which are not. In this context, 
30 it is the task of priority manager 12 to assign priorities to function modules 10 
and to modify those priorities for sequence control purposes. The task of 
scheduler 1 1 is then to decide, as a function of those priorities, which function 



modules 10 are in the active state and which function modules 10 are in the 
inactive state. The ways in which priority manager 1 2 operates are explained 
below with reference to Figures 2 through 4. 



5 In Figure 2, priority p is plotted against a time t on a diagram. What is plotted as 
time t here is the time during which a module is in a specific state, i.e. either 
active or inactive. The diagram in Figure 2 shows, as examples, the priorities of 
modules A and B. In addition, an alternative illustration A' is shown with 
reference to module A. Module B serves only as a comparison module, and is 
10 therefore depicted as having a constant priority over the entire time period. At 
time tO, module A has a priority 0. This time tO can be defined, for example, by 
the fact that at that time, module A has informed the sequence control system, 
_ i.e. either scheduler 1 1 or priority manager 12, that it is now ready to run. Time 

C t is then therefore to be understood as a waiting time, since priority manager 1 2 

r j5 is continuously increasing the priority of module A. At time t1, the priority of 
i: module A then exceeds the constant priority of module B, so that at time t1 , 

D scheduler 1 1 will activate module A and shift module B into an inactive state. 

■ This applies, of course, only on the assumption that modules A and B are ready 

IT to run, but must not run simultaneously. Priority manager 12 thus assigns a 

Eko priority to module A as a function of a time period. 

B A further possibility for assigning priorities to a module results from the 

comparison of module A and module A'. The priority profiles depicted in Figure 
2 for modules A and A' differ in terms of the increase in priority per unit time. 

25 Module A' is not activated until a much later time t2, since the priority increase 
for this module A' is less than the priority increase of module A. The difference 
in slopes results from the fact that the waiting time t is additionally associated 
(for example, by multiplication) with the intensity of a state of system 2. The 
state of system 2 envisioned here is, in particular, the intensity of a sensor 

30 signal of system 2. The more intense the measured value of the sensor of 

system 2, the greater the slope of the priority of module A or A'. A nonlinear 
profile for the priority of A or A' may also result in this case. 



A further possibility for assigning a priority to the modules consists in assigning 
the modules a priority exclusively as a function of a sensor signal. In the case of 
an engine, for example, provision could be made for the priority of a module to 
be associated directly with the engine speed, i.e. the higher the engine speed, 
5 the higher the priority of a specific module becomes. 

Figure 3 shows a further method with which priority manager 12 allocates a 
priority to a module A. In Figure 3 as well, a module B with constant priority is 
shown for comparison. In the case of module A shown in Figure 3, the priority 
10 once again increases linearly between times tO and t3 as a function of the 

waiting time t. At time t3, module A is activated by scheduler 1 1 . The priority 
manager then abruptly assigns an increased priority to module A. This is 
i= _ necessary in order to ensure that module A is now processed for a specific time. 

Cf This is necessary in particular if the competing module B does not, as shown 
jjf 5 here, have a constant priority but rather itself has a priority which rises slightly 
% over time; or if, as depicted in Figure 3, the priority of module A decreases 

'0 slightly after activation of module A (time period following time t3). The reason 

I is that in both of these cases, there would otherwise be a continuous switching 

;!! back and forth between module A and module B, i.e. module A would be 

CEO respectively activated and then deactivated at short time intervals. Priority 
manager 1 2 is therefore designed so that when a module is activated, an 
increase in priority is abruptly applied in order to achieve a certain hysteresis in 
the switching back and forth between modules of similar priority. 

25 A further manner in which the priority manager can allocate a priority to a 

module A is shown in Figure 4. In Figure 4, an absolute time - for example an 
absolute time after a motor vehicle has been started - is plotted on the time axis 
t. The absolute times t4 and t5 define a time window, module A being given a 
very high priority within this time window. With a priority assignment of this 

30 kind, it is possible to execute a module preferentially as a function of an 

absolute time. Outside this time window, the priority of module A can then be 
managed in a conventional manner, for example by continuously increasing the 
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priority with a waiting time of module A, as also shown in Figure 4. An absolute 
time window of this kind is desirable, for example, if specific function modules 
absolutely must be executed in specific time windows. This is the case, for 
example, with specific diagnostic functions such as those used for motor 
5 vehicles. It is necessary in this case to ensure that for standardized tests, which 
often contain only a single time window that is suitable for a specific function 
test, the function modules associated therewith are also executed. Outside the 
time window, provision is again made, by way of a normal priority assignment 
based on waiting time or the like, for the corresponding function modules to be 
10 invoked at least occasionally. 

As a function of the priorities that were assigned by priority manager 12 to the 

individual function modules 10, scheduler 11 then determines which modules 
C° are activated and which modules are inactivated. This is done, for example, by 

jjf 5 activating scheduler module 1 1 at regular time intervals and then activating or 
% deactivating function modules 10 as a function of the priorities. Another 

y3 possibility may consist in always activating scheduler module 1 1 when a 

function module 10 completes its activity, since at that point as well, another 
Jl! decision can be made as to which modules can and cannot then run. Another 

120 possibility for invoking scheduler 1 1 consists in making the activation of 
=- scheduler module 1 1 dependent on external signals, for example sensor signals 

of system 2. 

An explanation will now be given, with reference to Figures 5-8, as to how 
25 scheduler module selects the modules to be activated as a function of the 
priorities of function modules A, B, C, D, E, F, G, and H. From the set of 
modules A through H, shown in Figure 5, that are ready to run, i.e. awaiting 
activation, the module with the highest priority is selected first. In the present 
case this is module A, which is shown in Figure 5 by a circle. Scheduler module 
30 1 1 then determines whether further modules are present which must not run 
simultaneously with module A. This may be due, for example, to the fact that 
module A accesses specific actuators and no other modules must influence 
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those actuators at the same time. It may also be the case that module A 
influences sensor values which are required by other modules. 
Interdependencies of this kind between modules can be stored, for example, in a 
list which scheduler 1 1 can access. In the present case, for example, the 
5 behavior is such that modules C and E must not be active simultaneously with 
module A. These modules are therefore deleted from the set, as shown in Figure 
6. What then remains is a residual set in which module A which has already 
been selected, and the deleted modules C and E which must not be activated 
together with module A, are no longer present. In the present example this set is 
10 constituted by elements B, D, F, G, and H. From this residual set, the module 
with the highest priority - in the present example, module D - is once again 
selected. As shown in Figure 7, modules B and H must not be activated 
simultaneously with module D, so those modules are also deleted. The 
; J3 remaining residual set, with modules D and F, again no longer contains the 

3 5 deleted modules and the modules already selected. In this residual set, module D 
fff has a higher priority than module F, so that module D is selected in the next 

=H step. The residual set which now remains contains only module F, which may 

^ be activated simultaneously with module D, s that in the last step (see Figure 8), 

module F is also selected for activation. Scheduler 1 1 has thus also determined 
CgO that modules A, D, G, and F are to be active because of the priorities and 
™~ interdependencies. If one of the modules that has now been deleted was 

03 activated prior to this determination, scheduler 1 1 transfers that module into a 

deactivated state. If one of the selected modules was previously deactivated, 
that module is transferred by scheduler 1 1 into the activated state. 

25 

If it happens, in the aforesaid cases in which scheduler 1 1 must select a module 
with the highest priority, that more than one module possesses the same 
highest priority, the scheduler can then create a sequence for those 
equal-priority modules using any desired further criteria. In Figures 5-8, for 
30 example, alphabetical order (assuming equal priority) can be utilized for the 
decision. 
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What Is Claimed Is : 



1 . A control device for controlling a system, comprising: 

a plurality of activatable modules, each of the activatable modules 
having a corresponding priority value; 

a scheduler activating the activatable modules as a function of the 
corresponding priority values of the activatable modules to provide activated 
modules, the activated modules generating data by analyzing states of the 
system; and 

a priority manager modifying the corresponding priority value of at 
least one of the modules. 

2. The control device according to claim 1 , wherein the priority manager 
modifies the corresponding priority value of a particular module of the 
activatable modules as a function of a time period in which the particular 
module is one of activated and deactivated. 

3. The control device according to claim 1, wherein the priority manager 
modifies the corresponding priorities of activatable modules as a function of the 
states of the system. 

4. The control device according to claim 1, wherein the priority manager 
modifies the corresponding priority value of a particular module of the 
activatable modules as a function of the states of the system and a time period 
during which the particular module is one of activated and deactivated. 

5. The control device according to claim 1, wherein the priority manager 
modifies the corresponding priority value of a particular module of the 
activatable modules as a function of an activation message which indicates that 
the particular module has been activated. 

6. The control device according to claim 5, wherein the priority manager 
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modifies the corresponding priority value of the particular module as a further 
function of a corresponding deactivation message. 

7. The control device according to claim 1, wherein the priority manager 
modifies the corresponding priority value of a particular module of the 
activatable modules as a function of absolute time signals. 

8. The control device according to claim 1, 

wherein the scheduler selects a first module having a highest priority for 
an activation, the first module being selected from a set of the activatable 
modules awaiting the activation, 

wherein the scheduler assembles a residual set of the activatable modules 
from the set of the activatable modules, the residual set excluding the first 
module and second modules which must not be activated simultaneously with 
the first module, and 

wherein the scheduler selects third modules from the residual set of the 
activatable modules for the activation. 

9. The control device according to claim 8, 

wherein the scheduler repeatably selects the third modules of the 
activatable modules for the activation, each of the third modules having a 
respective highest priority, 

wherein the scheduler assembles the residual set of the activatable 
modules which exclude the third modules already selected for the activation and 
fourth modules which must not be activated simultaneously with the third 
modules, and 

wherein the scheduler continues to repeatably select from the third 
modules and to assemble the residual set until the residual set does not contain 
any of the activatable modules. 

10. The control device according to claim 8, wherein, after the first module and 
the third modules are selected, the scheduler verifies that the selected first and 
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third modules are activated and unselected modules of the activatable modules 
are not activated. 

1 1 . The control device according to claim 1, wherein the system includes one 
of a motor vehicle, an engine and a transmission. 

12. A method for operating a control device which controls a system, the 
control device including a plurality of activatable modules, the method 
comprising the steps of: 

assigning a corresponding priority value to each of the activatable 

modules; 

activating the activatable modules as a function of the 
corresponding priority values to provide activated modules; 

with the activated modules, generating data by observing states of 
the system; and 

modifying the corresponding priority values of the modules. 

13. The method according to claim 12, wherein the corresponding priority value 
of a particular module of the activatable modules is modified as a function of a 
time period during which the particular module is one of activated and 
deactivated. 

14. The method according to claim 12, wherein the corresponding priority value 
of a particular module of the activatable modules is modified as a function of the 
states of the system. 

15. The method according to claim 12, wherein the corresponding priority value 
of a particular module of the activatable modules is modified as a function of the 
states of the system and a time period during which the particular module is one 
of activated and deactivated. 

16. The method according to claim 12, wherein the corresponding priority value 
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of a particular module of the activatable modules is modified as a function of an 
absolute time signal. 

17. The method according to claim 12, further comprising the steps of: 

before the activating step, selecting a first module having a highest 
priority for an activation, the first module being selected from a set of the 
activatable modules awaiting the activation; 

assembling a residual set of the activatable modules from the set of 
the activatable modules, the residual set excluding the first module and second 
modules which must not be activated together with the first module; and 

selecting third modules from the residual set of the activatable 
modules for the activation. 

18. The method according to claim 17, further comprising the steps of: 

before the activating step, selecting the third modules of the 
activatable modules for the activation, each of the third modules having a 
respective highest priority; and 

assembling the residual set of the activatable modules which 
exclude the third modules already selected for the activation and fifth modules 
which must not run simultaneously with the third modules, wherein the third 
modules are selected and the residual set is assembled until the residual set 
does not contain any of the activatable modules. 

19. The method according to claim 17, further comprising the step of: 

after the first module and the third modules are selected, verifying 
that the selected first and third modules are activated and unselected modules 
of the activatable modules are not activated, wherein the first and third modules 
are not activated until still-activated modules of the activatable modules, with 
which the first and third modules must not run simultaneously, have been 
deactivated. 
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20. The method according to claim 12, wherein the system includes one of a 
motor vehicle, an engine and a transmission. 
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ABSTRACT OF THE DISCLOSURE 



A control device and a method for operating a control device which contains 
function modules, a scheduler and a priority manager. The control device is 
connected via data lines to a system to be controlled. The priority manager 
assigns to the modules modifiable priorities which are then taken into account 
when the modules are activated by the scheduler. 

20275-1 
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